Skip to content

TLS Handshake Deep Dive with David Bombal

    TLS Handshake Deep Dive with David Bombal

    Recently, I had the honor of talking to David Bombal about the TLS Handshake. We picked apart everything that occurs in the first few milliseconds every time you browse to an HTTPS website:

    In the video we stepped through every message of the Handshake, and spoke in detail about what information is included in each message and how that information is used.

    The ultimate goal of the TLS handshake is to derive Session Keys, these are the keys which actually Encrypt and Secure the data transfer between the Client and the Server. And in this TLS deep dive, we explained exactly how those Session Keys are derived.

    In the video, we also stepped through a Packet Capture showing a TLS Handshake using the RSA Key Exchange. You can download the Packet Capture and inspect it yourself using Wireshark.

    Practical TLS

    The slides and content we walked through in the video is from my TLS Deep Dive course: Practical TLS.

    It’s a meticulously crafted, thorough examination of the entire SSL and TLS ecosystem. In the course we walk through everything needed to take anyone from Security and Crypto amateur to an SSL Expert.

    But don’t take my word for it, see what others have said about the course:

    You can also check out the first two modules (and a few other lesson) for free to make your own decision about the quality of the course:

    Great Timing Twitter…

    In unrelated news, the day this video released is also the day Twitter decided to do a profile review. 🤦‍♂️🤦‍♂️

    Thanks Twitter… great timing.

    If you are trying to connect with me on Twitter and see something like this, either click through “Yes, view profile”, or give it a few days. But, please do connect with me on my new Twitter account =)

    5 7 votes
    Article Rating
    Subscribe
    Notify of

    15 Comments
    Oldest
    Newest Most Voted
    Inline Feedbacks
    View all comments

    That was a great presentation.

    Loved the video, even though I am a newbie to the world of IT and I didn’t quite get all of it by the end I was quite excited by how it all works. Very interesting and well explained, ill be watching that again. Thankyou.

    I was looking for your discount code. Where can I find it?

    Best SSL/TLS explanation video I’ve seen. Is it possible to share private key for blue.com for lab purposes?

    how much money can I make for knowing this, ‘.

    /\
    ?

    Thank you very much for such a great explanation on handshake

    The Packet Capture is no longer available 🙁

    Hi, thanks for the perfect video. COuld you please upload the Wireshark PCAP file again? it is not available anymore.
    Thanks alot!

    hello ,
    where have you private keys ? and why i need to have ssl_keys.log file to decrypt https et private key to decrypt tls ? is it not the same encryption ?
    Cordially

    Last edited 7 months ago by Marillesse

    Re: the PCAP: “8026 This link has been deleted by the owner.”

    Last edited 7 months ago by anonymous

    Hello Ed
    You course is just GREAT it is the best source availabl for TLS.
    I am asking if you offer the slides ( power poinr, pdf) for your TLS course ( free part on youtube) so I can use it while teaching to my students